release: taskflow 0.2.10

[heggria]

Summary

• release the organized saved-flow directories and scriptCwd: "flow" work as Taskflow 0.2.10
• align the root, all ten publishable packages, plugin manifests, MCP install pins, server-version assertions, website metadata, SECURITY and release/rollback guidance
• keep CharterArc at 0.2.7-experimental.0
• make the comprehensive built-dist E2E derive its expected server version from the package manifest, preventing future release-version drift

Release gates

• pnpm test — 2184 passed, 0 failed, 4 skipped
• pnpm run typecheck
• pnpm audit --prod --audit-level high — no known vulnerabilities
• generated skills check
• pnpm run test:pack — 10 packages, 27 explicit imports, 74 wildcard exports, 6 bins
• deterministic release tarballs — 10/10 at 0.2.10, exact internal dependency normalization, no workspace:*
• pnpm run test:e2e-codex-mcp-full — 15/15 against built dist
• website production export — 127 pages
• independent release-diff review — PASS, no blocking or non-blocking findings

Release identity

• base main: ffbefc09aeec532e65161288df72e97be9cdcd27
• release head: 4f90f0d5de0c3a1940dabe0ec38d75ac756ba02b
• v0.2.10 does not exist yet
• all ten package@0.2.10 registry endpoints returned 404 before publication

After this PR is squash-merged, wait for exact main CI, then create annotated v0.2.10 on the resulting main commit. Publishing remains exclusively tag-driven through .github/workflows/publish.yml.